From 120aba731f6a24ab31eb752e4e5eaf18da2f7ba4 Mon Sep 17 00:00:00 2001 From: Alex Kanitz Date: Sat, 14 Nov 2026 19:48:36 +0100 Subject: [PATCH] ci: let Dependabot label all its PRs Remove `target-branch` from every Dependabot entry: it names the default branch anyway, and while it is set, GitHub doesn't apply an entry's options, labels included, to security updates. Security update pull requests then get `type: dependencies` instead of Dependabot's own labels. The `ignore` rules now also apply to security updates, as intended. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 088247a..86b4bf6 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,7 @@ version: 2 -# Every entry targets `main`, the default branch (`target-branch`) +# No entry sets `target-branch`: pull requests go to the default branch +# (`main`) anyway, and while `target-branch` is set, GitHub doesn't apply +# the entry's options (`labels`, `ignore`, ...) to security updates updates: # Dependencies in `pyproject.toml` (the `docs` and `tests` extras) - package-ecosystem: pip @@ -7,7 +9,6 @@ updates: labels: ["type: dependencies"] schedule: interval: monthly - target-branch: main versioning-strategy: increase-if-necessary groups: # Dependencies of the documentation, in pull requests of their own @@ -24,7 +25,6 @@ updates: labels: ["type: dependencies"] schedule: interval: monthly - target-branch: main groups: github-actions: patterns: ["*"]